Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
File: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft (raw, json)
Hash identifier: sVweF6sUsOgtPHPLClcee33EGGLxoP0sM2AYGqZaWDg=
Subject key identifier: 4A:AB:42:36:6A:B9:B2:30:CB:87:B3:93:CB:43:F9:6B:80:B2:2D:B7
Authority key identifier: 0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
Certificate issuer: /CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
Certificate serial: 019D394144F833A4CEF912D987123E382798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
Manifest number: 156A
Signing time: Sun 29 Mar 2026 11:01:11 +0000
Manifest this update: Sun 29 Mar 2026 11:01:11 +0000
Manifest next update: Mon 30 Mar 2026 11:01:11 +0000
Files and hashes: 1: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl (hash: 1r3bPSkXuOmYHGzTyJtVzre6klPfm0Z2w4GbZU5J3cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:44:f8:33:a4:ce:f9:12:d9:87:12:3e:38:27:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
Validity
Not Before: Mar 29 11:01:11 2026 GMT
Not After : Mar 30 11:01:11 2026 GMT
Subject: CN=4aab42366ab9b230cb87b393cb43f96b80b22db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:57:65:33:29:ce:9e:55:3a:17:b0:f1:89:
ab:07:ff:81:1b:38:29:f2:03:81:46:f0:85:09:cb:
5f:e9:d3:7f:47:33:03:17:fd:85:07:a2:f8:a8:4a:
52:6a:b5:4c:12:65:8e:3c:9d:f9:2d:ed:38:20:86:
b2:89:f5:d1:75:f3:1a:d4:de:57:84:5f:51:3e:97:
70:75:b3:69:40:52:ed:9a:26:65:74:d0:66:da:8f:
d3:73:ec:1a:97:0d:88:0b:88:7d:95:ce:20:86:fa:
8c:f1:58:e7:f8:8d:3f:0c:3d:ed:38:9c:18:4f:5b:
e2:da:36:2b:ce:5d:26:ad:a0:3b:30:9f:cc:5f:fd:
76:2a:4f:b4:93:85:c0:86:68:ba:1b:6e:d5:61:ad:
20:39:17:6f:ef:1c:d2:e6:38:90:6f:8b:5d:8d:b6:
e5:03:4d:43:2d:91:f0:6a:3f:ab:87:09:8a:74:55:
3a:0d:ef:d2:1d:36:49:59:f8:53:9b:10:cf:0b:c6:
0b:42:2c:8f:ba:28:20:65:f4:83:ea:0e:b4:6a:63:
59:6f:d2:64:96:d8:cf:e1:fb:9d:d4:a6:b1:d5:37:
29:8f:99:63:81:ae:b0:e7:e1:c2:1e:21:f7:a4:19:
47:af:e3:68:91:8c:92:31:2a:df:76:ca:0c:b6:30:
02:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AB:42:36:6A:B9:B2:30:CB:87:B3:93:CB:43:F9:6B:80:B2:2D:B7
X509v3 Authority Key Identifier:
keyid:0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d6:1f:ed:e8:df:42:96:bd:bb:03:3e:7e:76:75:4e:aa:44:
fe:d8:fc:1f:4b:2f:4b:7c:23:ff:a6:ab:54:b5:12:9c:f9:d7:
c8:45:71:35:8e:d8:05:3d:3b:4d:ca:18:d8:78:fd:c9:c2:6b:
c7:02:49:a2:7a:b1:37:8e:1e:44:ca:d1:07:44:0e:82:51:08:
5c:6d:54:b3:80:f9:5e:f9:1c:43:79:22:f6:b2:1d:ea:32:c6:
e8:b4:38:c5:2c:94:47:5b:4b:5e:9b:1b:ea:63:86:6b:e4:67:
22:b1:8e:53:e9:69:5f:4d:fc:76:49:94:c3:87:22:db:4e:9d:
bf:7f:e1:fa:ea:70:81:2a:dd:06:e2:a5:81:15:dc:59:a4:10:
5a:e9:07:b9:bf:e4:d5:7a:0f:9b:1e:64:15:49:6e:0b:13:f1:
1a:34:fc:5b:10:3f:38:94:28:45:e9:26:28:09:01:6e:f5:87:
19:b5:72:35:98:41:e3:6c:2e:35:00:d8:f4:36:7d:d3:cd:c3:
56:f9:82:ef:6a:da:32:5a:82:92:bc:f3:06:09:02:bc:17:09:
a2:38:0d:23:d1:47:3f:7f:e2:7a:24:2e:55:9e:74:d6:d0:2e:
e3:11:58:e3:69:d0:40:92:14:95:d8:56:85:8e:d0:41:46:17:
df:84:b4:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QUT4M6TO+RLZhxI+OCeYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNGYwYjlhNWZlMDM4OWZhZGNiYmZiMWZhMWM0MGM0YTRi
YTBkMmIwHhcNMjYwMzI5MTEwMTExWhcNMjYwMzMwMTEwMTExWjAzMTEwLwYDVQQD
Eyg0YWFiNDIzNjZhYjliMjMwY2I4N2IzOTNjYjQzZjk2YjgwYjIyZGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyItXZTMpzp5VOhew8YmrB/+BGzgp
8gOBRvCFCctf6dN/RzMDF/2FB6L4qEpSarVMEmWOPJ35Le04IIayifXRdfMa1N5X
hF9RPpdwdbNpQFLtmiZldNBm2o/Tc+walw2IC4h9lc4ghvqM8Vjn+I0/DD3tOJwY
T1vi2jYrzl0mraA7MJ/MX/12Kk+0k4XAhmi6G27VYa0gORdv7xzS5jiQb4tdjbbl
A01DLZHwaj+rhwmKdFU6De/SHTZJWfhTmxDPC8YLQiyPuiggZfSD6g60amNZb9Jk
ltjP4fud1Kax1Tcpj5ljga6w5+HCHiH3pBlHr+NokYySMSrfdsoMtjACYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqrQjZqubIwy4ezk8tD+WuAsi23MB8GA1UdIwQY
MBaAFAxPC5pf4Difrcu/sfocQMSkug0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREU4TG1sX2dPSi10eTcteC1oeEF4S1M2RFNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS85MGJhMTctMDlkYy00YjdkLWE0NTMt
ZjYwNmFjZTRhY2MyLzEvREU4TG1sX2dPSi10eTcteC1oeEF4S1M2RFNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS85MGJhMTctMDlkYy00YjdkLWE0NTMtZjYwNmFjZTRhY2My
LzEvREU4TG1sX2dPSi10eTcteC1oeEF4S1M2RFNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNYf7ejf
Qpa9uwM+fnZ1TqpE/tj8H0svS3wj/6arVLUSnPnXyEVxNY7YBT07TcoY2Hj9ycJr
xwJJonqxN44eRMrRB0QOglEIXG1Us4D5XvkcQ3ki9rId6jLG6LQ4xSyUR1tLXpsb
6mOGa+RnIrGOU+lpX038dkmUw4ci206dv3/h+upwgSrdBuKlgRXcWaQQWukHub/k
1XoPmx5kFUluCxPxGjT8WxA/OJQoRekmKAkBbvWHGbVyNZhB42wuNQDY9DZ9083D
VvmC72raMlqCkrzzBgkCvBcJojgNI9FHP3/ieiQuVZ501tAu4xFY42nQQJIUldhW
hY7QQUYX34S0oA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:52 2026 by rpki-client